The Designand Implementation Of Minifilter Micro-framework File Encryption And Decryption System

With the development of the Internet and the widespread applications ofinformation technology, making it the attention of information security is increasinglyhigh. Research related to information security is also increasing. At present, theprotection of information is mainly based on two major aspects of the system securityand network security. Information is stored mainly in the form of files stored on acomputer disk, So this article on the security aspects of the system from the start,how to design a system that can effectively achieve the security file information,become the main content of this paper. Currently, the system file protection aremainly two types of applications and filter driver implementation technology, whichis recognized as relatively safe and stable, but the Filter driver’s compatibility oftraditional model is not good, do not form a complete system.This project is to study the traditional model and the new generation of modeldevelopment techniques and process-accessing control techniques, then made anddesigned a based process-access control Minifilter file encryption and decryptionsystem. In the user layer, using USBKey for authentication, ensure that the systemuser is a legitimate user. Research and implementation of this system based on theprocess-access control mechanisms file extension, the process needs to be protectedapplication file operation is set to the authorization process, the other set to non-authorization process, so that both can be achieved protected files, it will not affectthe normal use of other programs, the system has better flexibility. In the core layer,using Microsoft’s Minifilter to develop encryption drive, and compared to traditionaldrive model, which enables developers to focus on the functional development, andgood compatibility and stability has improved, we have to solve leak of Windowssystem cache-mechanism, the design and implementation of document plaintext andciphertext dual caching mechanism, not only did not reduce the efficiency of thesystem, but also to avoid the risk of leaks. It is safe and flexible to the protection offile information.